Debug Logging Vulnerability in Cisco Duo Authentication Proxy

CVE-2025-20345

What is CVE-2025-20345?

A vulnerability exists in the debug logging function of Cisco Duo Authentication Proxy that allows a high-privileged, authenticated remote attacker to access sensitive information within system log files. This issue arises from inadequate masking of critical data before it is recorded in the logs. An attacker exploiting this flaw could gain visibility into sensitive information that is typically restricted, posing serious risks to system integrity and data confidentiality.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References